This policy explains how long BulkVerify keeps the different kinds of data involved in using the Service.
1. Uploaded files and result files (your account)
The file you upload and the result files we generate for you (valid, invalid, free provider, disposable, risky/unknown, duplicates and the full CSV report) are stored in private storage that cannot be reached from the web. They are automatically removed from your account 24 hours after the verification job is completed. For large lists that are verified over several days, the 24-hour period starts when the whole list is finished, so no results disappear before you can download them. The per-address results stored in our database for your job are deleted at the same time.
Cancelled or failed jobs are cleaned up in the same way. Uploads that were started but never completed are deleted after 24 hours.
2. Verification history (metadata)
After the files are removed, your verification history keeps the job’s metadata — date, file name, category, file size and result counts — so you can see your past activity. The history shows “Files expired” instead of download links. Metadata is deleted when you delete your account.
3. Operational archive
Separately from your account, BulkVerify keeps an internal operational archive of submitted lists and verification results (for example the original list and the verified, unverified and free-provider address lists). The archive is stored outside the public website, is not accessible to other users and is not subject to the automatic 24-hour removal. It is kept for service integrity, security and abuse prevention, handling disputes and legal requests, and improving verification quality. Archive files are retained until they are deleted manually by our administrators.
4. Account data
Your account data (name, email address, password hash, language, registration and last-login information) is kept while your account exists. When you delete your account, your account data, verification history and any remaining user files are deleted immediately. Operational archive records are handled as described in section 3.
5. Other data
- Contact messages: kept as long as needed to handle your request and related follow-up.
- Daily usage counters: deleted after 90 days.
- Domain DNS cache: domain-level results (not email addresses) are kept for up to 14 days.
- Server and security logs: kept for up to 14 days unless needed to investigate an incident.
- Admin audit logs: kept to document administrative actions.
6. Questions and requests
For questions about this policy or to make a data protection request, contact [email protected]. See also our Privacy Policy.